Skip to main content

Employee Offboarding Best Practice

Ola Stål avatar
Written by Ola Stål
Updated this week

When someone leaves your organization, offboarding ensures their access to systems, licenses, and services is removed. This protects company data, prevents license waste, and maintains compliance.

Effective offboarding is a critical part of SaaS management — especially for small and medium-sized businesses.

With Substly, you don’t need enterprise-grade IAM software to secure and streamline offboarding. You use what you already have — Entra ID or Workspace — and extend it with Substly to cover the services that can’t be automated.

This gives you a secure, efficient, and affordable offboarding process designed for modern SMBs.


Why offboarding can be challenging for SMBs

Identity platforms like Microsoft Entra ID and Google Workspace provide powerful lifecycle management tools. When a SaaS application supports SSO or SCIM (System for Cross-domain Identity Management), both provisioning and deprovisioning can usually be automated.

However, most SaaS vendors only include SSO/SCIM on Enterprise plans, often costing 4–5× more than standard plans. That means:

  • Automation is possible, but often not economically feasible

  • SMBs end up with a mix of automated and manual offboarding steps

  • Some services are offboarded in Entra ID / Workspace

  • Many others still require manual intervention by team members

Without a structured workflow, this creates gaps, delays, and risk.


How Substly helps

Substly complements your identity platform — it does not replace it.

  • Entra ID / Google Workspace handle automation where supported

  • Substly manages every service that cannot be automated

When you start an offboarding in Substly:

  1. Substly identifies all systems assigned to the user

  2. Service owners receive notifications with direct links to remove access

  3. Service owners confirm completion in one click

  4. Admins track status in real time and can send reminders

The result is a complete, consistent offboarding flow across all tools — automated or not.


Ideal setup for SMBs

Most SMBs do not need a dedicated IAM tool such as Okta or OneLogin.

A cost-efficient and secure setup is: Entra ID / Google Workspace + Substly

This gives you:

  • Automation where available

  • A secure workflow where automation is not supported

  • Full visibility of offboarding progress

  • Reliable reminders and accountability

  • No enterprise-IAM pricing or complexity


Key benefits

✅ Lower risk

No lingering accounts or forgotten access rights.

✅ Significant time savings

Customers report up to 90% faster offboarding, thanks to automated notifications and central tracking.

✅ Better license management

Licenses are reclaimed quickly and consistently.

✅ Simple for everyone

Service owners only click a link and confirm.


Related Articles

Did this answer your question?